Threat Modeling

This skill facilitates interactive threat-modeling sessions. By analyzing the architecture and data flows of a feature before implementation, this skill aims to prevent A06:2025 – Insecure Design.

Usage

Deploy this skill when planning a new feature, service, or significant architectural change.

Example Triggers:

• "I want to add a new password reset flow. Can we threat model it?"
• "Let's use the STRIDE methodology to review the design for the new payment processing microservice."

Workflow